$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: kZBeDjByq5tVCvXi9nMJ4G2Q7cgDW9RRuWPIaVW/K6E= Subject key identifier: 18:62:E0:0D:EC:BA:18:66:64:A7:F0:E2:DB:15:C2:19:2C:3F:03:37 Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 573915D6B0223407FE1B0101BBE3D7D5D45755C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 0154 Signing time: Fri 22 Aug 2025 05:21:54 +0000 Manifest this update: Fri 22 Aug 2025 05:16:54 +0000 Manifest next update: Mon 25 Aug 2025 15:15:54 +0000 Files and hashes: 1: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: qQiMuOKfrH8PAPkv5BzDpLFaZ1Dhp8Gu3GpyZWN3n5w=) 2: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: H3hffUKrAMQgM7P8EVWElY25bwWrRFq4QzBAmlTISAU=) 3: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) 4: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: N7wya7CO/VPnENdT9xOI+hkCGTkYt1j4PlJ+e18Hp84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:39:15:d6:b0:22:34:07:fe:1b:01:01:bb:e3:d7:d5:d4:57:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Aug 22 05:16:54 2025 GMT Not After : Aug 25 15:15:54 2025 GMT Subject: CN=1862E00DECBA186664A7F0E2DB15C2192C3F0337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:81:9f:f6:c1:50:71:ca:4a:0b:a5:8a:b9: 43:d2:4c:ed:85:63:a3:6b:08:d7:76:1f:77:28:d1: 8b:0e:7b:e9:77:17:69:c6:07:1a:06:b6:a3:41:30: ef:e5:5e:5f:2c:24:fe:e0:7b:da:aa:b4:0a:a3:bb: e1:cc:7a:81:38:13:54:f6:32:c9:a3:58:6b:dd:a3: 80:30:69:5e:8f:ac:9f:a2:c1:0e:10:c8:2f:d7:2f: 1c:24:52:a3:6a:2b:25:c7:2b:5f:b1:af:44:f0:04: b2:47:0d:84:b4:e0:1a:0e:48:e9:84:73:bf:b9:29: 6c:50:f1:e5:92:69:36:65:b5:19:9a:9e:d8:57:e3: cc:d2:54:c2:91:17:4f:57:d3:16:fd:49:9c:9e:39: f6:b0:6b:f6:97:ab:f4:b5:20:21:de:80:4c:33:39: b4:3f:5f:46:b5:81:27:7a:9b:db:93:02:0f:7e:7c: c6:26:3c:8e:8f:06:5b:24:5c:a3:55:89:3a:a6:4d: a1:e5:6d:d9:f5:bd:64:b3:8c:cc:54:82:0c:06:5a: 4a:e4:fc:b1:c4:37:5f:ad:e2:b5:ec:0c:68:1e:d3: 3f:76:be:77:ec:64:f2:5b:b8:51:9e:66:2b:1f:a0: 67:94:b4:d3:78:90:3f:b0:03:f6:d3:29:14:38:3b: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:E0:0D:EC:BA:18:66:64:A7:F0:E2:DB:15:C2:19:2C:3F:03:37 X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:05:52:84:74:22:32:58:a4:40:2c:35:05:c4:05:d7:85:94: c2:ff:11:97:7b:42:d7:03:c2:ef:96:d2:d6:3e:bf:c6:9f:98: 75:6c:cb:ea:95:50:92:f4:7c:4b:e7:36:29:0b:0d:ee:10:eb: fe:ee:18:16:38:77:6d:aa:5f:9d:1f:34:a0:94:24:ec:e3:a8: 63:f0:74:a9:31:4f:c1:77:86:4a:60:db:2c:d4:f8:1a:90:95: 40:f8:56:4c:cf:28:4b:54:22:f7:ca:a5:e1:9c:1f:3f:20:4f: ee:2e:4c:59:2d:06:e0:4b:7d:3f:0a:d3:5e:4c:65:18:14:79: 06:e6:07:55:3a:7b:99:4b:90:89:34:f7:8a:46:fa:93:99:98: 2c:82:a7:04:c9:ad:ae:88:ba:b4:97:0d:ac:6a:f0:1e:7d:cd: de:47:8d:03:cc:e0:fe:02:03:2a:e3:e3:97:82:f9:7f:4a:d9: a7:9f:b4:fe:a6:87:df:88:fd:b2:92:56:35:c6:b1:5c:d7:28: bb:e7:e9:95:de:38:4c:83:cf:7e:4c:06:42:f6:84:fe:30:81: 84:46:4b:21:5b:06:95:bd:a8:c5:55:21:21:f7:1f:64:a3:f4: 83:85:32:13:89:c6:0d:93:32:28:15:aa:cb:27:d0:af:10:bb: 44:f8:05:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzkV1rAiNAf+GwEBu+PX1dRXVcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNTA4MjIwNTE2NTRaFw0yNTA4MjUxNTE1NTRaMDMxMTAvBgNV BAMTKDE4NjJFMDBERUNCQTE4NjY2NEE3RjBFMkRCMTVDMjE5MkMzRjAzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcx4Gf9sFQccpKC6WKuUPSTO2F Y6NrCNd2H3co0YsOe+l3F2nGBxoGtqNBMO/lXl8sJP7ge9qqtAqju+HMeoE4E1T2 MsmjWGvdo4AwaV6PrJ+iwQ4QyC/XLxwkUqNqKyXHK1+xr0TwBLJHDYS04BoOSOmE c7+5KWxQ8eWSaTZltRmanthX48zSVMKRF09X0xb9SZyeOfawa/aXq/S1ICHegEwz ObQ/X0a1gSd6m9uTAg9+fMYmPI6PBlskXKNViTqmTaHlbdn1vWSzjMxUggwGWkrk /LHEN1+t4rXsDGge0z92vnfsZPJbuFGeZisfoGeUtNN4kD+wA/bTKRQ4OyfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGLgDey6GGZkp/Di2xXCGSw/AzcwHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEFUoR0IjJYpEAsNQXEBdeFlML/EZd7QtcD wu+W0tY+v8afmHVsy+qVUJL0fEvnNikLDe4Q6/7uGBY4d22qX50fNKCUJOzjqGPw dKkxT8F3hkpg2yzU+BqQlUD4VkzPKEtUIvfKpeGcHz8gT+4uTFktBuBLfT8K015M ZRgUeQbmB1U6e5lLkIk094pG+pOZmCyCpwTJra6IurSXDaxq8B59zd5HjQPM4P4C Ayrj45eC+X9K2aeftP6mh9+I/bKSVjXGsVzXKLvn6ZXeOEyDz35MBkL2hP4wgYRG SyFbBpW9qMVVISH3H2Sj9IOFMhOJxg2TMigVqssn0K8Qu0T4BdQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:03 2025 by rpki-client